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• The National Highway Traffic Safety Administration fined Honda $70 million January 8 
for failing to report 1,729 accidents that caused deaths or serious injuries over 11 years. - 
CNNMoney (See item 4) 

• The former head of Oregon-based Sunwest Management retirement centers pleaded guilty 
January 8 to running an investment fraud scheme that defrauded investors out of $130 
million. - Associated Press (See item 7) 

• One worker died and at least two other individuals were injured at the Green Valley 
Chemical fertilizer plant in Creston January 8 following a reported explosion at the facility. 
- Associated Press; Waterloo Cedar Falls Courier (See item 1_3) 

• A Centers for Medicare and Medicaid Services study released in December identified 732 
hospitals nationwide that will have their Medicare payments lowered by 1 percent over the 
fiscal year from October 2014 through September 2015 due to medical errors that are 
considered avoidable. - Lawrence Journal-World; Associated Press (See item 23) 
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Energy Sector 



1. January 8, Bakersfield Californian - (California) Oil company involved in Arvin gas 
leak investigated for oil tank emissions. The San Joaquin Valley Air Pollution 
Control District issued a notice of violation December 29 to Petro Capital Resources 
LLC for emitting gas from tanks without a permit following a March 2014 gas pipeline 
leak in Arvin that forced a nearly 9-month evacuation of about 36 residents. The Kern 
Environmental Enforcement Network issued a report to the air district stating the 
possibility of gas emissions coming from 3 of the oil company’s 4, 8,000-gallon light 
crude oil storage tanks that were involved in the incident. 

Source: http://www.bakersfieldcalifomian.com/local/x23121551/Oil-company- 
involved-in-Arvin-gas-leak-investigated-for-oil-tank-emissions 

For additional stories, see items 6 and 30 
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Chemical Industry Sector 

2. January 9, WAVE 3 Louisville - (Kentucky) Emergency crews respond to hazmat 
situation at chemical company. Operations resumed about 2 hours after emergency 
crews responded to a reported HAZMAT situation at the Lubrizol Corporation 
chemical facility in Louisville January 9. Officials were not authorized to disclose the 
nature of the incident. 

Source: http://www.wave3.com/story/27799426/emergencv-crews-respond-to-hazmat- 
situation-at-chemical-company 

3. January 8, U.S. Environmental Protection Agency - (New Jersey) DuPont fined for 
air pollution at Deepwater, New Jersey. The U.S. Environmental Protection Agency 
fined E.I. DuPont de Nemours and Company (DuPont) $531,000 for alleged Clean Air 
Act violations January 8 including the improper maintenance and repair of 2 large 
refrigeration units at the company’s chemical manufacturing plant in Deepwater. 
DuPont corrected the problems, implemented a leak detection program, and brought its 
reporting processes into compliance following the settlement. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/d0cf6618525a9efb85257359003fb69d/196af 

a014ded463785257dc7005ba782 



For additional stories, see items 6, 13, and 30 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. January 8, CNNMoney - (National) Honda hit with $70 million in fines for failing to 
report accidents over 11 years. The National Highway Traffic Safety Administration 
fined Honda $70 million January 8 for failing to report 1,729 accidents that caused 
deaths or serious injuries over 11 years. Honda stated that the failure to file reports was 
caused by data and computer programming errors. 

Source: http://monev.cnn.com/2015/01/08/news/companies/honda-safety-fine/ 

5. January 8, Associated Press - (National) Subaru recalls 199k vehicles to fix brake 
line rust. Subaru announced a recall for around 199,000 vehicles sold or registered in 
20 cold weather States and Washington D.C., due to the potential for road salt to 
corrode brake lines, leading to brake fluid leaks and longer stopping distances. The 
recall affects model year 2009-2013 Forester, 2008-2011 Impreza, and 2008-2014 
WRX and WRX STI vehicles. 

Source: http://abcnews.go.com/Business/wireStorv/subaru-recalls-199k-vehicles-fix- 
brake-line-rust-28079983 

6. January 8, Dark Reading - (International) Banking trojans disguised as ICS/SCADA 
software infecting plants. A researcher with Trend Micro identified 13 varieties of 
banking malware disguised as legitimate industrial control systems (ICS) software 
updates from Siemens, GE, and Advantech. The researcher stated that he first identified 
the attacks in October and that they originate as spearphishing attempts or drive-by 
download attacks. 

Source: http://www.darkreading.com/attacks-breaches/banking-troians-disguised-as- 
ics-scada-software-infecting-plants/d/d-id/1318542 

For another story, see item 30 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

7. January 8, Associated Press - (Oregon) Former Sunwest CEO pleads guilty to mail 
fraud. The former head of Oregon-based Sunwest Management retirement centers 
pleaded guilty January 8 to running an investment fraud scheme that defrauded 
investors out of $130 million. The former CEO misled investors in the chain of over 
300 assisted-living centers by portraying the company as prosperous while it was 
rapidly losing money in 2006. 

Source: http://www.columbian.com/news/2015/ian/08/former-sunwest-ceo-pleads- 
guilty-to-mail-fraud/ 
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For another story, see item 6 
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Transportation Systems Sector 

8. January 9, Associated Press - (Arizona) More than 20 hurt in tour bus crash in 
rural Arizona. A Phoenix -based Tour West America bus carrying 52 passengers 
overturned while on an agricultural sightseeing trip near Yuma January 8, injuring 23 
people. The cause of the crash was unknown and officials are investigating. 

Source: http://www.msn.com/en-us/news/us/more-than-20-hurt-in-tour-bus-crash-in- 
rural-arizona/ar-AA7WhS0 

9. January 9, Associated Press - (New Mexico) City bus crashes into Albuquerque 
home; up to 8 injured. A city bus was struck by a van at an intersection and crashed 
into a home in Albuquerque January 8 injuring up to eight people. 

Source: http://www.msn.com/en-us/news/us/city-bus-crashes-into-albuquerque-home- 
up-to- 8-inj ured/ar- AA7 WCoM 

10. January 8, WBBM 2 Chicago - (Illinois) Amtrak passengers furious at “ridiculous” 
13-hour delay. About 170 passengers headed from Chicago to New York and Boston 
on Amtrak’s Lake Shore Limited train route were delayed for more than 13 hours at 
Union Station in Chicago January 7. Passengers reported receiving conflicting reasons 
for the delay. 

Source: http://chicago.cbslocal.com/2015/01/08/amtrak-passengers-furious-at- 
ridiculous-13-hour-delay/ 

11. January 8, Greenville News - (South Carolina; Georgia) Delta jet makes emergency 
landing at GSP. A Delta jet with 46 passengers traveling to Atlanta made an 
emergency landing January 8 at Greenville-Spartanburg International Airport in South 
Carolina shortly after takeoff due to mechanical problems. No one was injured during 
the landing and airport police and fire departments were standing by for assistance. 
Source: http://www.greenvilleonline.com/storv/news/local/2015/01/08/delta-iet-makes- 
emergenc y-landin g- gsp/2 1451341/ 

12. January 7, Associated Press - (New York) 17-car pileup closes section of Saw Mill at 
rush hour. A vehicle overturned onto an embankment and slid back into traffic on the 
Saw Mill Parkway in Mount Kisco January 7 causing a 17-car pile-up that closed the 
southbound lanes for approximately 3 hours. Westchester County police stated that 
weather was not the cause of the crash. 

Source: http://www.poughkeepsieioumal.com/storv/news/local/new- 
Vork/2015/01/07/saw-mill-river-parkway-accident/2 1390953/ 

For additional stories, see items 21 and 25 
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Food and Agriculture Sector 



13. January 9, Associated Press; Waterloo Cedar Falls Courier - (Iowa) Manager says 1 
dead following explosion at Iowa plant. One worker died and at least two other 
individuals were injured at the Green Valley Chemical fertilizer plant in Creston 
January 8 following a reported explosion at the facility. The cause of the explosion was 
not immediately disclosed. 

Source: http://wcfcourier.com/news/local/manager-savs-dead-following-explosion-at- 
iowa-plant/article a9d0f826-980b-l Ie4-alcf-c7ca67772777.html 

14. January 9, U.S. Department of Agriculture - (Pennsylvania; New Jersey) 

Pennsylvania firm recalls beef products due to misbranding and an undeclared 
allergen. The Food Safety and Inspection Service reported January 8 that the Daniel 
Weaver Company recalled about 7,092 pounds of Halal Beef Soujouk products after a 
spice supplier notified the company that cumin used in the products’ spice mix may be 
contaminated with undeclared peanut allergens. The recalled products were produced 
between November 13 and December 3 and were sent to a distributor in New Jersey. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-005-201 5-release 



15. January 8, KVUE 24 Austin - (Texas) The cookie monsters? 2 charged in 
Pepperidge Farm theft. Police arrested and charged 2 Austin men January 3 suspected 
of stealing a trailer that contained about $18,000 worth of Pepperidge Farm food items 
and an aluminum dolly and printer worth $2,000. 

Source: http://www.kvue.com/storv/news/crime/2015/01/08/the-cookie-monsters-2- 
charged-in-pepperidge-farm-theft/21456907/ 

16. January 8, U.S. Department of Agriculture - (National) California firm recalls beef 
and pork products due to foreign matter contamination. The Food Safety and 
Inspection Service announced January 8 that Unibright Foods Inc., recalled about 
48,139 pounds of frozen, ready-to-eat sukiyaki beef and gingered pork products due to 
the possibility that may be contaminated with metal extraneous materials. The recall 
was initiated after a stainless steel wire was found in a beef product that was sent to a 
restaurant in Illinois. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-004-2015-release 



17. January 8, U.S. Environmental Protection Agency - (Idaho) EPA settles with Gly- 
Tek, Inc. (Idaho) for delayed sulfuric acid spill reporting. The U.S. Environmental 
Protection Agency entered into an agreement with Gly-Tek, Inc., a food additive 
formulator, to resolve allegations that the company violated federal laws following a 
24,700-pound release of a sulfuric acid solution at their Twin Falls, Idaho, facility in 
November. A $25,000 penalty was assessed. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/d0cf6618525a9efb85257359003fb69d/bdlbe 

9a06a5de27485257dc800026de3 
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18. January 7, U.S. Department of Agriculture - (International) California firm recalls 
boneless beef products imported without benefit of inspection. Jinon Corporation, 
doing business as Nijiya Market, issued a recall January 7 for about 359 pounds of 
frozen beef products imported from Japan because they were not presented at the U.S. 
point of entry for inspection by the Food Safety and Inspection Service, posing possible 
health risks. The recalled products were sold at a retail store in Torrance, California. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 5/recall-002-20 1 5-release 

19. January 7, U.S. Department of Agriculture - (National) Pennsylvania firm recalls 
chili product due to misbranding and an undeclared allergen. The Food Safety and 
Inspection Service announced January 7 that Fresh Food Manufacturing recalled about 
35,865 pounds of chili products due to undeclared peanuts. The affected products were 
distributed to retailers in Maryland, Ohio, Pennsylvania, and West Virginia. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-003-201 5-release 
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Water and Wastewater Systems Sector 

20. January 9, WXIA 11 Atlanta - (Georgia) Water main, pipe breaks cause problems 
all over Atlanta. Multiple water main breaks occurred throughout Atlanta January 8-9 
due to freezing temperatures. Repair crews responded to the incidents and traffic was 
diverted in affected areas. 

Source: http://www.llalive.com/story/news/local/2015/01/09/water-main-breaks- 
causing-problems-all-over-atlanta/2 1483727/ 

21. January 8, KXAN 36 Austin - (Texas) Crews shut off gushing water in main break. 
Two separate water pipes broke on and near U.S. Highway 290 in Austin January 7, 
releasing water for almost 3 hours onto the streets. An Austin Water Utility spokesman 
stated that repair crews arrived onto the scenes but it was unknown if low temperatures 
were the cause of the breaks. 

Source: http://kxan.com/2015/01/08/water-pipe-problems-flood-freezing-austin- 
roadways/ 

22. January 8, Beckley Register-Herald - (West Virginia) Beckley, surrounding towns 
under boil advisory. Cold weather caused a major leak on a 14-inch Beckley Water 
Co. main line and a precautionary boil advisory was issued for Beckley, Glen Morgan, 
Crab Orchard, and Sophia areas January 8.The advisory was set for 24 hours while 
crews repaired the line in about 3 hours, flushed the system, and will send samples to a 
lab for testing to deem the water safe. 

Source: http://www.register-herald.com/news/beckley-surrounding-towns-under-boil- 
advisory/article 8b7c0c36-f8ce-5c95-b41e-c5c8d296c656.html 

For additional stories, see items 6 and 30 
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Healthcare and Public Health Sector 



23. January 9, Lawrence Journal-World; Associated Press - (National) KU Hospital 
among 11 penalized in Kansas. The federal Centers for Medicare and Medicaid 
Services study released in December identified 11 hospitals in Kansas and 721 
nationwide that will have their Medicare payments lowered by 1 percent over the fiscal 
year from October 2014 through September 2015 due to medical errors that are 
considered avoidable. The report found that the hospitals had the highest rates of 
hospital- acquired conditions which included infections from catheters, blood clots, bed 
sores, and other preventable complications. 

Source: http://www2.liworld.com/news/2015/ian/08/ll-kansas-hospitals-penalized- 
rates-infections/ 



24. January 8, KHQA 7 Hannibal - (Missouri) Nursing home evacuated after sprinklers 
break. Twenty-nine residents from the Clarence Care Center in Missouri were 
evacuated and transported to a nearby nursing home January 8 after a frozen sprinkler 
system broke, causing water to flood the building’s community room and disrupt 
several lights. Officials planned to have residents back in the building by January 9 
after they completed repairs to the sprinkler system. 

Source: http://www.connecttristates.com/news/story.aspx?id=l 146762 

For another story, see item 7 
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Government Facilities Sector 

25. January 9, Reuters - (National) Record-breaking cold closes U.S. schools, sends 
penguins inside. Frigid temperatures from a winter storm along the East and Midwest 
left several inches of snow, and prompted authorities to close schools across several 
States, cancel 515 flights and delay 1,937 others January 8. 

Source: http://bangordailvnews.com/2015/01/09/news/nation/record-breaking-cold- 
closes-u-s-schools-sends-penguins-inside/ 

26. January 8, WCVB 5 Boston - (Massachusetts) Crash involving school bus reported 
in Plymouth. Authorities are investigating after 15 students were transported to area 
hospitals as a precaution following an accident between a West Elementary School bus 
and a vehicle in west Plymouth January 8. 

Source: http://www.wcvb.com/news/crash-involving-school-bus-reported-in- 
plymouth/30600302 

27. January 8, WYFF 4 Greenville - (North Carolina) Frozen pipes burst, forcing city 
hall evacuation. The Asheville City Hall in North Carolina was evacuated and closed 
January 8 after cold temperatures caused pipes to burst, flooding several floors of the 
building. Crews spent several hours cleaning the scene and officials hoped to reopen 
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the facility January 12. 

Source: http://www.wvff4.com/news/frozen-pipes-burst-forcing-city-hall- 
evacuation/30606240 
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Emergency Services Sector 

28. January 8, CAW - (Ohio) Ohio changing execution drugs. The Ohio Department of 
Corrections and Rehabilitation announced January 8 that it is changing the drugs used 
in lethal injections by replacing the usage of the two-drug regimen of midazolam and 
hydromorphone with thiopental sodium and pentobarbital after the original drug 
combination caused an inmate to convulse and gasp for 10 minutes before he died 
January 2014. 

Source: http://www.cnn.com/2015/01/08/us/ohio-execution-drugs/index.html 
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Information Technology Sector 

29. January 9, Softpedia - (International) Andromeda botkit used for Bitcoin mining 
purpose. Fortinet researchers observed attackers using an older, cracked version of the 
Andromeda botnet malware to deliver Bitcoin mining software to compromised 
computers. The malware is version 2.06 of Andromeda and can also download 
additional modules and updates from the attackers’ command and control servers. 
Source: http://news.softpedia.com/news/Version-of-Andromeda-Bot-Used-for-Bitcoin- 
Mining-Purpose-46947 4 . shtml 

30. January 9, Threatpost - (International) Schneider patches buffer overflow in 
Wonderware server. Schneider Electric issued a patch for its Wonderware InTouch 
Access Anywhere Server vl0.6 and vl 1 that closes a remotely exploitable buffer 
overflow vulnerability. The software is used in industries including the chemical, 
energy, manufacturing, and water utility sectors. 

Source: http://threatpost.com/schneider-patches-buffer-overflow-in-wonderw are- 
server/ 11 03 10 

31. January 9, Softpedia - (International) Unauthorized root command execution 
possible in ASUS routers. A researcher reported a vulnerability in ASUS routers 
where a firmware service could be used by attackers with access to the network to 
reconfigure the router. 

Source: http://news.softpedia.com/news/Unauthorized-Root-Command-Execution- 
Possible-in-ASUS-Routers-469463 .shtml 

32. January 9, Help Net Security - (International) OpenSSL release patches 8 
vulnerabilities. The OpenSSL Project released updates for its open-source library, 
closing eight vulnerabilities including two that could be used for denial of service 
(DoS) attacks. 
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Source: http://www.net-security.org/secwoiid.php?id=17803 



33. January 8, Softpedia - (International) vBulletin warns of vBSEO vulnerability. The 
developers of vBulletin informed users of the now-defunct vBSEO search engine 
optimization product that a security vulnerability exists in vBSEO and offered a 
solution for the issue. 

Source: http://news.softpedia.com/news/vBbulletin-Warns-of-vBSEO-Vulnerabilitv- 



469403 .shtml 



For another story, see item 6 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Noting to report 
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Commercial Facilities Sector 

34. January 9, KSAT 12 San Antonio - (Texas) Massive fire rips through apartment, 
displaces 20 families. A January 8 fire inside Building 21 of the Lincoln Village 
apartment complex in San Antonio displaced about 20 families due to a partial structure 
collapse and heavy damage in a second section of the building. The cause of the fire is 
under investigation. 

Source: http://www.ksat.com/content/pns/ksat/news/2015/01/Q8/iackson-keller- 
fire.html 

35. January 7, KABC 7 Los Angeles - (California) 30 evacuated after flooding, roof 
collapse at Irvine apartment complex. A hot water pipe rupture January 7 at an 
apartment building in Irvine caused the structure’s roof to collapse and flooded a 
portion of the complex. Thirty residents were displaced and one resident was injured 
during the incident. 

Source: http://abc7.com/news/30-evacuated-after-flooding-roof-collapse-at-irvine- 
apartment/465420/ 

36. January 7, SC Magazine - (International) Credit cards among data possibly accessed 
in AMResorts breach. AMResorts reported December 15 that an unauthorized party 
may have accessed the personal information, including financial data, of an undisclosed 



-9 - 



r Return to tool 


number of individuals who used payment cards to book reservations through the 
company’s Web site. The company continues to investigate and updated its processes 
to deny access to financial data. 

Source: http://www.scmagazine.com/credit-cards-among-data-possiblv-accessed-in- 
amresorts-breach/article/39 1 47 2/ 



Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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